Friday, May 29, 2015

wifi notes

Enable WiFi, but disable networking.

List available interfaces
sudo airmon-ng

Start monitor mode, assuming wlan0 appears above, substitute alternatives
sudo airmon-ng start wlan0

See what's going on, scanning not saving, note channel, ssid and APs MAC
sudo airodump-ng mon0

fix channel 11, AP mac 00:, and save to a file called SSID (change the name):
sudo airodump-ng -c 11 --bssid 00:00:00:00:00:00 -w SSID mon0

crack WEP key, with only one AP in the file, it'll be selected as target, substitute pcap names
aircrack-ng SSID*.cap

decrypt the pcap, substitute key and AP's MAC
airdecap-ng -w Key-from-crack -b 00:00:00:00:00:00 SSID-##.cap

view the content with foremost or chaosreader

Tuesday, May 26, 2015

tunnel and mount a cifs/samba share

mountpoint Z:

mkdir Z

set-up Local listener tunnel, 9445 is my choice, my-fileserver is the hostname on the remote network,  445 is the actual SMB listener number port, files.network.org, is my ssh entry to the remote network. -f Fork/background listener, N no command.

ssh -L 9445:my-fileserver:445 -fN files.network.org

Mount CIFS type, localhost is this machine, /files/ is the share on the remote file server, Z is my mountpoint. remoteuser is the user on the file server, uid i can't remember, noperm means don't locally worry about permissions, port should be the tunnel choice above.

sudo mount -t cifs //localhost/files/ Z/ -o username=remoteuser,uid=5000,rw,noperm,port=9445